16706 matches found
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: spire-controller-manager-fips, terraform-docs, yunikorn-k8shim, fuse-overlayfs-snapshotter, kyverno-policy-reporter-fips, prometheus-node-exporter, longhorn-instance-manager-fips, gitlab-rails-ce, otel-cli, neuvector-scanner-fips, rancher-agent, goose-fips,...
GHSA-X4JJ-H2V8-HQQV vulnerabilities
Vulnerabilities for packages: fuse-overlayfs-snapshotter, gitlab-rails-ce, neuvector-scanner-fips, rancher-agent, podman-fips, gitness, helm-push, cosign, cert-manager-fips, aws-flb-firehose-fips, harbor, flux, gitlab-kas-fips, grafana-operator-fips, karpenter, helm-mapkubeapis, loki,...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: kyverno-policy-reporter-fips, goose-fips, sftpgo-plugin-auth, longhorn-share-manager, minc, nvidia-container-toolkit, crossplane-provider-aws-cognitoidp-fips, custom-pod-autoscaler, crossplane-provider-aws-lambda-fips, vgpu-util, flux, azure-service-operator-fips,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: pluto-fips, spire-controller-manager-fips, terraform-docs, yunikorn-k8shim, fuse-overlayfs-snapshotter, kyverno-policy-reporter-fips, prometheus-node-exporter, kuberlr, gitlab-rails-ce, longhorn-instance-manager-fips, nri-redis-fips, custom-pod-autoscaler-operator,...
CVE-2026-5059
CVE-2026-5059 – aws-mcp-server is a command-injection remote code execution vulnerability. The flaw occurs in how the server handles the allowed commands list, due to insufficient validation of a user-supplied string before it is used to perform a system call. This allows an unauthenticated attac...
CVE-2026-5059 aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability
aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handlin...
aws-mcp-server 操作系统命令注入漏洞
aws-mcp-server is a lightweight service developed by Alexei Ledenev. It enables AI assistants to execute AWS CLI commands through the Model Context Protocol MCP in a secure, containerized environment. aws-mcp-server has an operating system command injection vulnerability, which stems from...
aws-mcp-server 操作系统命令注入漏洞
aws-mcp-server is a lightweight service developed by Alexei Ledenev. It enables AI assistants to execute AWS CLI commands through the Model Context Protocol MCP in a secure, containerized environment. aws-mcp-server has an operating system command injection vulnerability, which stems from...
Linux Distros Unpatched Vulnerability : CVE-2026-40175
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Axios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1 are vulnerable to a specific gadget-style attack chain in...
DEBIAN-CVE-2026-40175
Axios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1 are vulnerable to a specific gadget-style attack chain in which prototype pollution in a third-party dependency may be leveraged to inject unsanitized header values into outbound requests. This...
UBUNTU-CVE-2026-40175
Axios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1 are vulnerable to a specific gadget-style attack chain in which prototype pollution in a third-party dependency may be leveraged to inject unsanitized header values into outbound requests. This...
CVE-2026-40175
Axios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1 are vulnerable to a specific gadget-style attack chain in which prototype pollution in a third-party dependency may be leveraged to inject unsanitized header values into outbound requests. This...
CVE-2026-40175
Axios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1 are vulnerable to a specific gadget-style attack chain in which prototype pollution in a third-party dependency may be leveraged to inject unsanitized header values into outbound requests. This...
UBUNTU-CVE-2026-33551
An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0. Restricted application credentials can create EC2 credentials. By using a restricted application credential to call the EC2 credential creation API, an authenticated user with only a reader role...
GHSA-W53M-3RV6-Q4V9 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu, linux-azure...
GHSA-WGXF-R68R-7W9H vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu, linux-azure...
GHSA-PW2V-CMFH-X2P3 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu, linux-azure...
CVE-2026-22993 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu, linux-azure...